Security Issues and Software Updates Management in the Industrial Internet of Things (IIoT) Era

Mugarza, Imanol; Flores, José Luis Martínez; Montero, J.L.

doi:10.3390/s20247160

Cited by 36 publications

(15 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Patching policy varies between immediate, 30, 60, and 90 days [59] depending upon the potential impact of the vulnerability or bug; therefore, patching can be highly impactful in tackling future cyberattacks.…”

Section: Updates and Incremental Patches Installationmentioning

confidence: 99%

A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid

et al. 2021

View full text Add to dashboard Cite

The world is transitioning from the conventional grid to the smart grid at a rapid pace. Innovation always comes with some flaws; such is the case with a smart grid. One of the major challenges in the smart grid is to protect it from potential cyberattacks. There are millions of sensors continuously sending and receiving data packets over the network, so managing such a gigantic network is the biggest challenge. Any cyberattack can damage the key elements, confidentiality, integrity, and availability of the smart grid. The overall smart grid network is comprised of customers accessing the network, communication network of the smart devices and sensors, and the people managing the network (decision makers); all three of these levels are vulnerable to cyberattacks. In this survey, we explore various threats and vulnerabilities that can affect the key elements of cybersecurity in the smart grid network and then present the security measures to avert those threats and vulnerabilities at three different levels. In addition to that, we suggest techniques to minimize the chances of cyberattack at all three levels.

show abstract

Section: Updates and Incremental Patches Installationmentioning

confidence: 99%

A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid

et al. 2021

View full text Add to dashboard Cite

show abstract

“…This update cycle, depicted in Figure 2(a), is comprised of 10 steps classified into three main phases: (i) Design and release of updates, (ii) Update deployment phase and (iii) Runtime phase. In addition, Figure 2 shows how this update cycle is aligned with the IEC 62443-2-3 [16] technical report, entitled Patch management in the IACS environment, which defines the patch lifecycle model of Figure 2(b) [5,17].…”

Section: Concept and Approachmentioning

confidence: 99%

Safe and secure software updates on high-performance mixed-criticality systems: The UP2DATE approach

Agirre

Yarza

Mugarza

et al. 2021

Microprocessors and Microsystems

Self Cite

View full text Add to dashboard Cite

Over-The-Air Software Updates (OTASU) are gaining popularity on the safety-critical domain. The motivation behind this trend is twofold. On the one hand, the ability of adding new functionality and services to the system without a complete redesign makes product makers more competitive and improves user experience. On the other hand, the increasing connectivity of emerging embedded devices makes OTASU a crucial cyber-security demand to keep the system up-to-date with latest security patches. However, the application of OTASU in the safety-critical domain is not straightforward, as they are not contemplated by current functional safety standards. The UP2DATE European H2020 project, seeks to provide solutions to cope with the challenging requirements of safety and security standards with respect to software updates. This paper gives an overview of UP2DATE, its foundations and the initial description of its safe and secure architecture that builds around composability and modularity on heterogeneous high-performance platforms.

show abstract

“…The OTA update is an appropriate way to manage such a large number of devices. Large and scalable IIoTs are usually based on mesh or ad hoc networks, and their external connections are restricted only within a time window [ 6 ].…”

Section: Introductionmentioning

confidence: 99%

Distributed Watchdogs Based on Blockchain for Securing Industrial Internet of Things

Lee

Kwon

2021

Sensors

View full text Add to dashboard Cite

The Industrial Internet of Things (IIoT) could enhance automation and analytics in industrial environments. Despite the promising benefits of IIoT, securely managing software updates is a challenging problem for those critical applications. This is due to at least the intrinsic lack of software protection mechanisms in legacy industrial systems. In this paper, to address the challenges in building a secure software supply chain for industrial environments, we propose a new approach that leverages distributed watchdogs with blockchain systems in protecting software supply chains. For this purpose, we bind every entity with a unique identity in the blockchain and employ the blockchain as a delegated authenticator by mapping every reporting action to a non-fungible token transfer. Moreover, we present a detailed specification to clearly define the behavior of systems and to apply model checking.

show abstract

Security Issues and Software Updates Management in the Industrial Internet of Things (IIoT) Era

Cited by 36 publications

References 38 publications

A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid

A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid

Safe and secure software updates on high-performance mixed-criticality systems: The UP2DATE approach

Distributed Watchdogs Based on Blockchain for Securing Industrial Internet of Things

Contact Info

Product

Resources

About